News service
Insufficient legal basis for data processing
Date de décision
15 novembre 2022
Autorité
Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
HU
Secteur
Media, Telecoms and Broadcasting
Pays
HU
Droit
GDPRStatut
FINALDescription
The Hungarian DPA imposed a fine of EUR 5,200 on a news service. A customer had complained to the DPA about subscribing to a newsletter to receive a daily news digest, however, they had also received direct marketing messages. During its investigation, the DPA found that the processing of the data subjects' personal data for direct marketing purposes was unlawful. As the controller had not sufficiently informed the data subjects of their rights, the DPA found that the data subjects' consent to receive the newsletter was not valid as a legal basis for the processing of the data for marketing purposes due to the insufficient information provided.